Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
File:                     j35CW5mA3j5tTVVraau_8SVIZ7E.mft (raw, json)
Hash identifier:          ck2gTgEUueNa+Rxxe0/Y0yfkP9dPNqrVbee4HF0umk8=
Subject key identifier:   59:5F:B0:EE:CD:24:10:8D:73:CA:C0:3F:FF:93:EB:CC:F1:7E:ED:70
Authority key identifier: 8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1
Certificate issuer:       /CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
Certificate serial:       01962F7460BA4E898BF065C286A2C186892C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft
Manifest number:          0D
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: FsU8rSGyQb0kGFvbxmQ4nDDUBg4.roa (hash: xmWHpgYL9RCJue+qrtt+Eau987wbwxVuh1gIf8HMA3I=)
                          2: j35CW5mA3j5tTVVraau_8SVIZ7E.crl (hash: isYZfjb7xZrhJq4M+hfFIb4lFnKDSUNDd7K0BnLSlws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:60:ba:4e:89:8b:f0:65:c2:86:a2:c1:86:89:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7e425b9980de3e6d4d556b69abbff1254867b1
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=595fb0eecd24108d73cac03fff93ebccf17eed70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:62:ca:9b:a9:cf:09:1c:e6:c5:9a:16:13:
                    11:d0:d2:7e:c3:af:a7:01:16:5f:55:7c:61:f5:e4:
                    50:fe:6d:80:6b:01:a2:1b:89:d1:78:c2:25:9a:46:
                    f5:51:29:c8:a3:24:93:b1:55:e6:af:85:d7:db:09:
                    8c:6c:26:47:63:0a:09:9d:bc:7d:a9:bf:d6:07:88:
                    1c:a3:92:d8:8c:dc:88:43:0f:66:53:e2:0b:dc:5c:
                    ee:80:e4:98:2a:40:cd:cf:34:13:60:91:45:2e:a5:
                    16:5f:c7:63:45:a3:27:f0:fc:c9:10:a4:cc:6f:be:
                    5e:f1:5d:d5:5b:ad:b7:f9:1b:4c:17:a8:67:d9:86:
                    be:69:21:27:aa:49:93:c9:8f:0d:4e:3c:ff:0e:33:
                    8a:95:55:b3:32:fb:75:41:ae:b0:3a:8f:d8:99:a8:
                    a9:7b:84:05:30:9a:73:d0:cb:78:73:eb:6f:11:bb:
                    25:5a:10:b8:41:56:39:cd:cc:6c:ed:ab:d8:88:ac:
                    de:0e:7e:7c:08:e4:20:a8:8d:9c:15:46:54:d9:d6:
                    ea:4c:f2:7a:15:e1:c4:e3:94:37:d3:01:7c:81:d7:
                    84:09:d6:fb:dd:96:2c:0d:fa:bb:44:33:c1:dc:d8:
                    d3:cd:e2:c8:b5:fb:0c:37:ab:4e:9d:3b:2e:77:5e:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5F:B0:EE:CD:24:10:8D:73:CA:C0:3F:FF:93:EB:CC:F1:7E:ED:70
            X509v3 Authority Key Identifier:
                keyid:8F:7E:42:5B:99:80:DE:3E:6D:4D:55:6B:69:AB:BF:F1:25:48:67:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j35CW5mA3j5tTVVraau_8SVIZ7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/608cb8-2d21-4177-95b2-914754807314/1/j35CW5mA3j5tTVVraau_8SVIZ7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ab:3d:f5:69:05:c3:af:fc:8b:b3:50:6f:2b:a7:20:ba:ac:
         9b:82:5e:ad:7f:2b:21:2b:51:6f:0f:10:54:6f:3d:80:c5:77:
         a4:3e:7e:12:d6:95:e5:b9:03:ca:3c:e6:b8:42:45:a5:44:51:
         da:7b:fd:24:f3:3c:b0:85:16:3d:60:77:c0:b2:a6:03:b3:58:
         c1:bf:d2:01:8a:55:e2:ec:6e:6e:a1:0f:06:d8:f6:cb:72:b1:
         c0:6f:fe:17:2b:b7:fe:44:84:64:83:bf:75:6f:b3:35:ac:40:
         f7:ae:b7:a1:26:38:d8:42:d2:48:50:ed:f7:04:2d:4e:c7:5c:
         cc:6d:a2:82:e2:9b:33:99:08:fe:15:51:c7:ba:86:a8:c8:0a:
         78:b6:0f:5a:18:51:dd:f2:80:80:41:53:89:0d:23:ec:b8:ab:
         21:bb:1b:dd:9a:c8:b6:ef:88:cc:0a:bd:42:f1:59:04:95:e5:
         74:85:4b:56:11:e9:17:34:9a:1c:b3:ff:57:50:0d:88:d6:83:
         c1:b6:dd:eb:9f:32:a9:fe:5d:6e:ea:df:b4:9a:51:df:1c:6c:
         21:da:dc:ff:dc:d3:ea:4a:3d:97:c7:62:bf:97:e1:f2:37:3d:
         97:1e:70:26:6b:ec:68:51:20:20:ff:99:fb:1b:58:91:5d:04:
         30:41:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----